-
"Antwerp's City Services Down After Hackers Attack Digital Partner"Antwerp, Belgium, is working to restore digital services that were disrupted by a cyberattack on its digital provider. The outage has impacted services used by citizens, schools, daycare centers, and law enforcement, all of which have been operating…
-
"Open-Source Tool for Security Engineers Helps Automate Access Reviews"ConductorOne made their identity connectors open-source in a project called Baton, which is available on GitHub. Each connector enables developers to extract, normalize, and interact with workforce identity data such as user accounts, permissions, roles…
-
"Russia's Second-Largest Bank VTB Bank Under DDoS Attack"The state-owned VTB Bank, Russia's second-largest financial institution, has reported the largest Distributed Denial-of-Service (DDoS) attack in its history. The pro-Ukraine collective IT Army of Ukraine has claimed responsibility for the DDoS attacks as…
-
"Russian Hackers Spotted Targeting US Military Weapons and Hardware Supplier"A Russia-connected state-sponsored hacking group has been linked to attack infrastructure that spoofs the Microsoft login page of Global Ordnance, a legitimate US-based military weapons and hardware supplier. Recorded Future attributed the new…
-
"For Cyberattackers, Popular EDR Tools Can Turn into Destructive Data Wipers"Many trusted Endpoint Detection and Response (EDR) technologies may contain a flaw that allows attackers to cause products to erase almost all data on installed systems. Or Yair, a SafeBreach security researcher who discovered the flaw, tested 11 EDR…
-
"Applying AI Techniques in Cybersecurity, Counterterrorism, and International Security"Artificial Intelligence (AI) has shown promise as a valuable tool for protecting against malicious actors. AI has been used to help predict terrorist attacks, destabilize terrorist networks, and mitigate cyberattacks in real-time. A newly established…
-
"Flaw in Aged Boa Web Server Threatens Supply Chain"Microsoft retired the Boa web server in 2005, but it is still widely used. The company recently revealed that malicious actors in attacks against the energy industry have exploited a vulnerability in the server's open-source component. This development…
-
"Georgia Tech and PNNL Launch Joint Cybersecurity Institute"The Georgia Institute of Technology (Georgia Tech) and the Pacific Northwest National Laboratory (PNNL) announced the formation of a joint institute, the Institute for Cybersecurity and Resilient Infrastructure Studies (ICARIS), to focus on critical…
-
"Scattered Spider Cybercrime Group Targets Mobile Carriers via Telecom, BPO Firms"Security researchers at CrowsStrike are warning that a threat actor tracked as "Scattered Spider" is targeting telecommunications and business process outsourcing (BPO) companies in an effort to gain access to mobile carrier networks and perform SIM…
-
"Swiss Government Wants to Implement Mandatory Duty to Report Cyberattacks"The Swiss government has recently asked its Parliament to amend the Information Security Act to make it mandatory for critical infrastructure providers to report cyberattacks to the National Cyber Security Centre (NCSC). Doing this will be aimed at…
-
"Organizations Failing to Unlock the Full Potential of Zero Trust"Over 90 percent of organizations migrating to the cloud have or are in the process of implementing a zero trust architecture. However, according to a new Zscaler study, only 22 percent of global Information Technology (IT) decision-makers are 'fully…
-
"Are We Taking Patient Privacy as Seriously as We Ought to Be?"Anita Allen, University of Pennsylvania professor of law and philosophy, kicked off the 2022 HIMSS Healthcare Cybersecurity Forum with a discussion on patient privacy in an era of widespread data sharing. Allen wanted to use her expertise in law and…
News